Log4j threat in Scriptcase?

Scriptcase 9
#1

Hi,
can someone please tell me if log4j is used in scriptcase and if there is a threat from this?

Best regards,
Joerg

#2

I have the same question, is there anyone who knows if there is a threat from this?

#3

A list of affected software here https://github.com/NCSC-NL/log4shell/tree/main/software

If you have a public site on the Internet, you should rather look about Apache which has released a patch for that.

#4

Trank you, Yannick. Very interesting what’s on the list.

#5

i read that this is a java specific issue so… if you are not running java you are safe… and as far as i know we all on scriptcase are only user old, pure, pretty and grate PHP.

so… dont worry

if you installed something else on your server or your scriptcase as custom code or so that uses java because you installed java on your server or app, that is something else to be worry about

bet regars

1 Like
#6

if you are using linux on your server and your linux uses apt… you can run this command on command line

apt version liblog4j2-java

it tells you the version of the library you are using, if you are not using it, the command returns just noting!
:smiley: